MAL-2025-148762 Malicious code in transform-dorado-phoenix-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8c06dcd35b1cd056dad87509186667ba2544e0b69410c71587604ce328274f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in europa-vuepress-sass-loader-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc630cc3b9853a3e4a5ab5e6fa977d883baedf6edd8f9d7ea2803d49476a0cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-spica-passport-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a713fe213ed9bf0e8d60873861b986fa6ae9d86a561fc57c525d5bae053da4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-reveal-md-react-bootstrap-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279aa0e60f46495584e2044891a57e17d52a3fa040efc26a9c9574b20e260df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-apollo-markdown-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43877fef46565713ec332e3eaea0f240ce8a94564f81b080ce2c75687fdced15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142982 Malicious code in got-prettier-stylelint-server-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d1e434b1aebd213e3a779b99e36366e7eebfbad07d55fc7687682a5c644709f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142220 Malicious code in eslint-gemini-unuk-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeaf8e815ecc4104bcf4c757eb068fddf1c5f5ff349a062c53fdab37fb623c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147244 Malicious code in remark-dotenv-safe-betelgeuse-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f67536623e6020a2084816b1ce2ffd1af360a6738503293222726a849783479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9def6fceb456b061c00e498a11707262f85486cef1aff1695db10f81d7d4f341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134809 Malicious code in kiki-lumpur59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738141615c68ad459741b1b1f75c58819d65dd110e8ef8dd61dc8c818f81c78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-tapai51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c998b31920dbee3fb51740e42cca76ffe2857ed9ca51b2883b90f76230185f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-soto8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b32cb008dddff5dc668d212ce339b52c28cc4202c654f3985597d6786eeaab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b25b2db06adea8332740dd3205556375e1a92751cb64a659cd7ab8511567707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-moci37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5711fb8f8776ba97f37c37987146b349a7979815ad0e0467d1f7b05e7adc73e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rojak56-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a20e8e8453f0dedede2ff47872fd3ee3c5319c55185b4e53cab1743a7afa692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-129478 Malicious code in putra-kue32-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1fef17ee4c5f641a5e7d7ff3ddccb56c7f8dc9796f164c2e631c53d701c4f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-wajit19-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 885b9937d10763111e14f78008ad4cf9ea2d01e8e526da51be601277f3133b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-lutis50-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2ddafa2956831a4dad7b775a14b8b8529e29a8d7d86617bfd6c0d02ce262e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in international_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8a4c0957e0b843f1f3bb777a01fb143da365c5b19967ddc019059e65b7d612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...